收集整理漏洞EXP/POC,大部分漏洞来源网络，目前收集整理了1400多个poc/exp，长期更新。
☆68Jan 7, 2025Updated last year
Alternatives and similar repositories for POC
Users that are interested in POC are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell co…☆32Feb 7, 2024Updated 2 years ago
- ☆13Feb 17, 2021Updated 5 years ago
- 三色哥斯拉（Godzilla）☆66Dec 27, 2024Updated last year
- 备份的漏洞库，3月开始我们来维护☆2,140Jul 13, 2026Updated 3 weeks ago
- 武器库、渗透测试、红蓝对抗、黑客攻防、目录扫描器、phpmyadmin爆破写一句 话☆12Feb 20, 2021Updated 5 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- Satori botnet variant☆14Mar 19, 2022Updated 4 years ago
- APT-GUID☆23Oct 23, 2020Updated 5 years ago
- A simple chrome-extension for website fingerprint extraction☆18May 28, 2025Updated last year
- 自动生成nuclei 2025HW poc☆127Jul 25, 2025Updated last year
- 一个IDEA插件：一键收集项目中所有jar包依赖的工具插件。遍历项目目录收集所有jar文件，复制到all-in-one文件夹，并自动添加为项目库。☆55Oct 30, 2025Updated 9 months ago
- PHP文件上传50+绕过手法全景解析☆18Mar 16, 2025Updated last year
- GitHubApi CVE Poc监控工具☆14Jan 23, 2026Updated 6 months ago
- JeecgCracker 是一个专门针对 JeecgBoot 框架的密码爆破工具。☆28Oct 29, 2024Updated last year
- 爬网站JS文件，自动fuzz api接口， 指定api接口（针对前后端分离项目，可指定后端接口地址），回显api响应☆765Jul 20, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Java Vulnerability Exploitation Platform☆2,141Updated this week
- Windows满足等保的基线核查脚本☆22Oct 9, 2023Updated 2 years ago
- 一款专注于 Java 主流 Web 中间件的内存马快速生成工具，致力于简化安全研究人员和红队成员的工作流程，提升攻防效率☆1,570Updated this week
- 记录一些代码审计过的源码☆182Feb 26, 2025Updated last year
- 哥斯拉webshell管理工具二次开发规避流量检测设备☆1,069Dec 2, 2025Updated 8 months ago
- ☆62Aug 12, 2023Updated 2 years ago
- JavaSecLab is a comprehensive Java vulnerability platform｜ JavaSecLab是一款综合型Java漏洞平台，提供相关漏洞缺陷代码、修复代码、漏洞场景、审计SINK点、安全编码规范，覆盖多种漏洞场景，友好用户交互U…☆871Jun 9, 2026Updated 2 months ago
- 该项目为Shellocde加载器，详细介绍了我们如何绕过防病毒软件，以及该工具如何使用☆21Jun 22, 2022Updated 4 years ago
- 让fscan再次伟大☆364Jun 18, 2026Updated last month
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- 自动化扫描利器，指纹识别更精准，漏洞扫描更全面☆383Oct 29, 2025Updated 9 months ago
- 基于已收集指纹库进行识别网站指纹的浏览器插件☆121Jul 30, 2025Updated last year
- (SP)^3: A Simple, Practical, and Safe Packet Spoofing Protocol☆17Mar 13, 2017Updated 9 years ago
- 用于批量扫描远程桌面是否关闭NLA，而后半自动寻找搜狗输入法RCE。☆23Oct 10, 2024Updated last year
- GeoServer（CVE-2024-36401/CVE-2024-36404）漏洞利用工具☆122Jan 17, 2025Updated last year
- the metasploit script(POC) about CVE-2021-36260☆20Nov 3, 2021Updated 4 years ago
- IDEA代码审计辅助插件（深信服深蓝实验室天威战队强力驱动）☆584Mar 10, 2025Updated last year
- ☆31Nov 1, 2022Updated 3 years ago
- icp备案查询☆407Sep 1, 2023Updated 2 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- Chunsou（春蒐），Python3编写的多线程Web指纹识别工具,适用于安全测试人员前期的资产识别、风险收敛以及企业互联网资产风险摸查。☆396Jul 14, 2026Updated 3 weeks ago
- cve系列更新☆33Updated this week
- FindSomething本地移植版--HeartK☆97Jul 15, 2025Updated last year
- 用友畅捷通T（TPlus） SQL注入批量POC QVD-2023-13612☆16Jun 28, 2023Updated 3 years ago
- 安全基线☆19Jul 23, 2021Updated 5 years ago
- HFS RCE 利用工具，支持HFS主流版本☆15Jun 13, 2024Updated 2 years ago
- Weblogic CVE-2023-21839 RCE (无需Java依赖一键RCE)☆115Feb 24, 2023Updated 3 years ago